CVE-2026-46466 Dell CVE debrief

Who should care

Administrators and users of Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, and LTS2024 release versions 7.13.1.0 through 7.13.1.70 should apply patches or mitigations. This includes operators, platform administrators, vulnerability management teams, and security teams responsible for ensuring the security and integrity of data protection and storage systems.

Technical summary

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an use of less trusted source vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to information tampering. The vulnerability has a CVSS score of 2.7 and a CVSS severity of LOW. The CVE record was published on 2026-07-03T14:16:30.593Z and was last modified on 2026-07-08T19:32:15.503Z.

Defensive priority

Apply patches or mitigations to prevent exploitation. Restrict access to vulnerable systems and monitor for suspicious activity.

Recommended defensive actions

• Apply patches or updates provided by Dell.
• Restrict access to vulnerable systems.
• Monitor for suspicious activity.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record was published on 2026-07-03T14:16:30.593Z and was last modified on 2026-07-08T19:32:15.503Z. The NVD entry is currently Analyzed. This vulnerability affects Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, and LTS2024 release versions 7.13.1.0 through 7.13.1.70. The vulnerability is an use of less trusted source vulnerability, which could potentially be exploited by a high privileged attacker with remote access, leading to information tampering. Evidence of exploitation is not currently available, and defenders should verify the affected scope and apply patches or mitigations.

Official resources